Release eslint-plugin-sonarjs version 2.0.0 with tag latest

[vdiez]

No description provided.

[ilia-kebets-sonarsource]

LGTM

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[karlhorky]

Is there a changelog / release notes for this anywhere?

I can't see any mention of this in:

1. The GitHub Releases (which seem outdated)
2. The repository search

The closest thing that I can find is a generated npm package diff like this one from Renovate, but since so many things moved, it seems unreadable

cc @yassin-kammoun-sonarsource

[karlhorky]

Socket Security is reporting new capabilities when upgrading from eslint-plugin-sonarjs@1.0.4 to eslint-plugin-sonarjs@2.0.0, so a changelog would help build trust :)

[vdiez]

Hi @karlhorky,

there are no specific release notes for the eslint plugin. This new 2.0.0 version was announced in the previous repository, which will be archived in the coming weeks.

We'll think about a proper way to have release notes properly generated.

The main change is that it does now contain all rules from SonarJS instead of a subset. If you have questions about specific rules let us know. We are not accessing network in any of the rules, but we are using the net module from Node.js to parse IPs. As for filesystem, we search for parent package.json files to know if a project has certain dependencies.

Cheers

[karlhorky]

Nice, thanks for the first introduction to 2.0.0 and explanation of the permissions! Looking forward to the full release notes when they are available.

If you're looking for a release notes / changelog solution, many in the Node.js ecosystem have adopted Changesets - maybe also a nice thing for eslint-plugin-sonarjs

This new 2.0.0 version was announced in the previous repository, which will be archived in the coming weeks.

Oh ok, I assume the announcement was the readme change here? Or was there something else too?

• Update README.md with new repository eslint-plugin-sonarjs#478

[vdiez]

Nothing else, some small announcement in the Sonar Community Roundup, but that's it.

Thanks for the hint on changesets, we'll have a look!